# @summary A short summary of the purpose of this class
#
# A description of what this class does
#
# @example
#   include clusters::firewalld_login
class clusters::firewalld_login {
    class { 'firewalld': }
    firewalld_zone { 'public':
      ensure           => present,
      #purge_rich_rules => true,
      #purge_services   => true,
      #purge_ports      => true,
      masquerade       => false,
    }
    firewalld_service { 'Allow ssh from the external zone':
      ensure  => 'present',
      service => 'ssh',
      zone    => 'public',
    }
    #firewalld_rich_rule { 'Accept from IHEP1':
    #  ensure => present,
    #  zone   => 'public',
    #  source => '202.122.32.0/21',
    #  action  => 'accept',
    #}
    #firewalld_rich_rule { 'Accept from IHEP2':
    #  ensure => present,
    #  zone   => 'public',
    #  source => '2401:de00::/32',
    #  action  => 'accept',
    #}
}
